Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
File:                     E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer (raw, json)
Hash identifier:          1jnmuhYrjw4s2uiqK2qstZE09Yvn1Nhf5h+Q1rfC4uk=
Subject key identifier:   E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2FCA19B3095D9E5827BED069508E24863E80C446
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Feb 2026 00:03:04 +0000
Certificate not after:    Fri 05 Feb 2027 00:08:04 +0000
Subordinate resources:    AS: 268513
                          IP: 45.161.212.0/22
                          IP: 2804:525c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 04:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ca:19:b3:09:5d:9e:58:27:be:d0:69:50:8e:24:86:3e:80:c4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  6 00:03:04 2026 GMT
            Not After : Feb  5 00:08:04 2027 GMT
        Subject: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:97:d4:5e:82:79:32:fa:03:c6:ef:3a:7c:
                    cf:d3:7a:ae:d3:15:a5:81:f8:36:34:cf:9e:5c:0f:
                    ba:0d:62:9f:eb:4f:ba:48:23:26:f5:a0:f5:ab:99:
                    0e:69:b7:c8:5f:9e:06:7b:47:42:61:24:6f:97:85:
                    1a:09:d1:c2:31:4f:d2:42:e7:c1:b7:c1:fb:48:80:
                    05:21:5c:a3:3d:fc:0b:d3:00:aa:95:63:d7:a1:74:
                    63:fd:ef:f0:47:ea:dc:e6:fc:51:a8:0f:91:b3:67:
                    66:9b:a4:be:fe:63:b4:ad:21:59:26:0f:e6:5a:c6:
                    6c:73:37:41:aa:91:d2:45:e7:9d:14:66:a3:5c:5f:
                    ee:2c:2d:86:ea:86:05:99:83:a7:61:f8:ea:8e:0a:
                    e8:0b:ea:2e:0a:ea:b9:f0:7b:22:cd:5e:5e:26:21:
                    cd:11:ff:62:98:2b:78:ed:7c:7d:44:65:88:56:c7:
                    f3:39:3b:63:05:95:19:b3:f2:24:79:aa:7c:85:25:
                    4c:cc:20:a6:eb:c5:69:f3:59:30:90:ef:e4:25:1c:
                    9b:03:dc:00:6d:e0:a0:46:31:c2:91:fc:24:34:60:
                    8d:f0:7d:54:16:8f:df:9b:ac:bc:bd:ae:ee:e3:16:
                    fe:20:6a:0a:97:7d:5b:42:7c:15:9f:83:2a:3c:34:
                    52:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.212.0/22
                IPv6:
                  2804:525c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268513

    Signature Algorithm: sha256WithRSAEncryption
         c7:8b:5b:0f:d6:c1:8f:53:06:4d:c9:0c:fa:09:08:2d:6f:31:
         df:60:16:17:d1:d1:f0:7b:48:c5:c3:09:6c:c8:83:95:28:46:
         a6:88:a7:a2:7b:4e:6e:1c:2b:a0:38:fa:ae:db:13:27:fb:55:
         d5:22:ed:62:a8:0e:a1:f8:f2:98:5b:a4:e9:37:27:c8:7b:bd:
         01:eb:30:2d:d5:c0:9e:2e:0b:6f:c7:ea:1f:93:fe:50:07:ec:
         44:ed:e5:4a:74:57:cc:a1:07:8d:f7:f7:40:b0:47:3a:c9:ec:
         2d:5c:3f:7a:27:3e:30:d4:d4:01:fd:11:c0:06:1a:a6:f9:81:
         f5:9d:75:fe:65:ba:0c:2e:c8:70:aa:a6:dc:0c:c0:6f:85:72:
         6a:41:be:58:6c:ae:9e:1b:c5:36:8d:5a:fc:f4:df:55:f5:bf:
         64:ec:02:60:88:d8:6e:53:ae:ce:4c:09:31:a4:70:9f:ed:c8:
         13:de:b1:ae:db:44:ca:82:db:46:b6:e5:58:ca:91:7c:78:0c:
         cf:a7:99:bc:71:9e:e5:50:3d:9a:c2:c9:ef:26:53:f3:90:44:
         39:2f:11:88:8d:f1:a3:ab:1a:0e:85:15:8a:c9:20:8e:d7:20:
         92:87:cc:cf:25:89:68:a9:c1:94:dc:54:b5:53:1a:30:d3:cd:
         6b:e7:6f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 04:23:59 2026 by rpki-client